Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.mft
File: zE3DCP5thhIQJvl0St1A4Rc1Q94.mft (raw, json)
Hash identifier: D4hAyya8IZ2Sf0K7KZCK9MYnqCT3IevlGX5nYawZeso=
Subject key identifier: 3B:83:B2:28:89:A7:F4:9F:C7:89:13:A4:E2:24:45:40:31:48:0A:9E
Authority key identifier: CC:4D:C3:08:FE:6D:86:12:10:26:F9:74:4A:DD:40:E1:17:35:43:DE
Certificate issuer: /CN=cc4dc308fe6d86121026f9744add40e1173543de
Certificate serial: 0194C5081148BB18A91346EDFFCAAFD45C9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zE3DCP5thhIQJvl0St1A4Rc1Q94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.mft
Manifest number: 113E
Signing time: Sun 02 Feb 2025 05:00:27 +0000
Manifest this update: Sun 02 Feb 2025 05:00:27 +0000
Manifest next update: Mon 03 Feb 2025 05:00:27 +0000
Files and hashes: 1: cNg_w6FNDPxXpKdIkq9A_UpQRD4.roa (hash: syLuSdgaorQGcBipXNeo5+gDHDzPudwTqzWzLW2dWo4=)
2: zE3DCP5thhIQJvl0St1A4Rc1Q94.crl (hash: MghEqG+Lbee2nLeJ3NN5cNDtO4/KmoaAIUm4QykGnYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.mft
rsync://rpki.ripe.net/repository/DEFAULT/zE3DCP5thhIQJvl0St1A4Rc1Q94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c5:08:11:48:bb:18:a9:13:46:ed:ff:ca:af:d4:5c:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc4dc308fe6d86121026f9744add40e1173543de
Validity
Not Before: Feb 2 05:00:27 2025 GMT
Not After : Feb 3 05:00:27 2025 GMT
Subject: CN=3b83b22889a7f49fc78913a4e224454031480a9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ce:a2:5a:e2:89:ba:e6:98:05:ea:03:0b:fd:
dc:27:cb:06:8e:ab:2c:f0:04:34:8d:93:c4:7d:d7:
c0:07:f6:33:db:62:fc:3d:0b:b3:53:52:0d:5e:32:
27:c8:95:8f:36:a7:d6:a2:6a:45:46:c4:d2:32:b7:
0d:c7:3a:2a:2f:84:44:b2:0b:89:50:df:7e:f8:fd:
9a:f0:2f:24:f9:ca:86:57:2c:09:46:c9:6c:cf:c9:
97:a7:27:f5:6f:08:86:1c:bc:52:bd:39:69:b8:ec:
49:27:07:f5:7b:ee:0d:f2:37:d5:f5:7f:4d:1d:a0:
cd:db:c2:97:be:95:ac:af:94:c6:59:de:29:5b:9f:
8f:b8:60:de:38:0b:21:8e:32:9e:84:d9:7b:22:41:
d8:57:44:68:c8:b6:1c:b2:08:fb:2f:6d:7d:70:80:
60:66:5f:0c:1c:a2:f7:ce:47:8b:51:88:9c:9c:24:
64:f2:62:9b:23:10:02:41:15:6f:27:1a:88:89:bf:
95:4a:27:4b:1a:e0:b4:1b:67:1b:c6:70:e6:e2:81:
36:5b:11:1b:b8:03:e0:fd:a9:59:7b:ae:dd:24:ab:
3d:03:e5:b0:be:b0:36:01:f7:12:40:7e:f7:a4:60:
97:cf:ee:c7:99:f6:7b:ad:ff:3c:72:1d:c6:d4:2e:
27:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:83:B2:28:89:A7:F4:9F:C7:89:13:A4:E2:24:45:40:31:48:0A:9E
X509v3 Authority Key Identifier:
keyid:CC:4D:C3:08:FE:6D:86:12:10:26:F9:74:4A:DD:40:E1:17:35:43:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zE3DCP5thhIQJvl0St1A4Rc1Q94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:40:a7:51:ba:67:79:53:2e:52:f5:55:34:37:aa:85:f8:55:
34:21:13:b5:b2:32:0d:0f:f6:7f:06:49:1a:35:a4:1d:32:9e:
ab:df:a5:c7:fd:65:0e:5f:3e:c4:80:f2:fc:56:9b:e3:f7:aa:
95:e3:7d:36:8a:cf:b5:48:c4:51:e1:e8:1f:95:ca:45:fb:a3:
00:43:d1:48:55:53:46:88:65:c3:c1:d5:9d:7a:83:42:c8:6f:
71:1a:68:c7:98:ab:69:27:7c:4b:94:ce:cd:93:a7:20:71:93:
43:af:6d:5a:3b:35:0f:b3:da:d1:23:36:1c:84:2f:ce:18:55:
24:19:b1:4c:e6:01:53:79:39:a7:bc:ff:e3:f9:b3:d8:91:03:
0c:89:25:87:a8:48:3c:b0:63:90:36:1b:b1:02:7d:54:ce:17:
50:a8:ed:e4:9f:e1:e5:a8:54:e1:7e:eb:27:17:97:19:85:ce:
3c:d9:68:05:9c:8a:96:09:5f:03:9d:56:13:70:36:c6:c1:04:
fb:f2:5f:f2:28:b2:14:6b:88:dd:07:e1:c3:f1:3e:18:74:17:
a6:41:d6:94:46:82:35:5b:d5:5a:e1:6b:f8:d8:3e:db:bf:ab:
32:f8:2f:d7:aa:fc:71:b3:54:ff:3a:8d:57:59:02:7c:01:4a:
6d:79:69:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:08:28 2025 by rpki-client